{"dataType": "CVE_RECORD", "containers": {"adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "redhat", "product": "ruby", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-docs", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-irb", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-libs", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-rdoc", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-ri", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-static", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-tcltk", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2021-33621"}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in Ruby that allows HTTP header injection. A CGI application using the CGI library may insert untrusted input into the HTTP response header. This issue can allow an attacker to insert a newline character to split a header and inject malicious content to deceive clients. \n            This vulnerability is marked as moderate because the flaw was more difficult to exploit but could still lead to some compromise of the confidentiality, integrity, or availability of resources under certain circumstances but are less easily exploited based on a technical evaluation of the flaw, or affect unlikely configurations."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2022-11-18T00:00:00Z", "x_subShortName": "redhat_6"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "redhat", "product": "ruby", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-doc", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-irb", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-libs", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "ruby-tcltk", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "rubygem-bigdecimal", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "rubygem-io-console", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "rubygem-json", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "rubygem-minitest", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "rubygem-psych", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "rubygem-rake", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "rubygem-rdoc", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "rubygems", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}, {"vendor": "redhat", "product": "rubygems-devel", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2021-33621"}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in Ruby that allows HTTP header injection. A CGI application using the CGI library may insert untrusted input into the HTTP response header. This issue can allow an attacker to insert a newline character to split a header and inject malicious content to deceive clients. \n            This vulnerability is marked as moderate because the flaw was more difficult to exploit but could still lead to some compromise of the confidentiality, integrity, or availability of resources under certain circumstances but are less easily exploited based on a technical evaluation of the flaw, or affect unlikely configurations."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2022-11-18T00:00:00Z", "x_subShortName": "redhat_7"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"medium\"}"}}}], "affected": [{"vendor": "canonical", "product": "libruby2.5", "versions": [{"status": "affected", "version": "0", "lessThan": "2.5.1-1ubuntu1.13", "versionType": "custom"}], "platforms": ["bionic"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "ruby2.5", "versions": [{"status": "affected", "version": "0", "lessThan": "2.5.1-1ubuntu1.13", "versionType": "custom"}], "platforms": ["bionic"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "libruby2.7", "versions": [{"status": "affected", "version": "0", "lessThan": "2.7.0-5ubuntu1.8", "versionType": "custom"}], "platforms": ["focal"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "ruby2.7", "versions": [{"status": "affected", "version": "0", "lessThan": "2.7.0-5ubuntu1.8", "versionType": "custom"}], "platforms": ["focal"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "libruby3.0", "versions": [{"status": "affected", "version": "0", "lessThan": "3.0.2-7ubuntu2.3", "versionType": "custom"}], "platforms": ["jammy"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "ruby3.0", "versions": [{"status": "affected", "version": "0", "lessThan": "3.0.2-7ubuntu2.3", "versionType": "custom"}], "platforms": ["jammy"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "libruby2.3", "versions": [{"status": "affected", "version": "0", "lessThan": "2.3.1-2~ubuntu16.04.16+esm4", "versionType": "custom"}], "platforms": ["xenial"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "ruby2.3", "versions": [{"status": "affected", "version": "0", "lessThan": "2.3.1-2~ubuntu16.04.16+esm4", "versionType": "custom"}], "platforms": ["xenial"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "ruby2.3-tcltk", "versions": [{"status": "affected", "version": "0", "lessThan": "2.3.1-2~ubuntu16.04.16+esm4", "versionType": "custom"}], "platforms": ["xenial"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "jruby", "platforms": ["noble", "resolute", "trusty"], "defaultStatus": "unknown"}], "references": [{"url": "https://ubuntu.com/security/CVE-2021-33621"}, {"url": "https://ubuntu.com/security/notices/USN-5806-1"}, {"url": "https://ubuntu.com/security/notices/USN-5806-2"}, {"url": "https://ubuntu.com/security/notices/USN-5806-3"}, {"url": "https://ubuntu.com/security/notices/USN-6181-1"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2021-33621"}], "descriptions": [{"lang": "en", "value": "The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object."}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2022-11-18T23:15:00Z", "x_subShortName": "canonical"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"not yet assigned\"}"}}}], "affected": [{"vendor": "debian", "product": "libruby3.1", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.2-4", "versionType": "deb"}], "platforms": ["bookworm"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "libruby3.1-dbgsym", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.2-4", "versionType": "deb"}], "platforms": ["bookworm"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "ruby3.1", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.2-4", "versionType": "deb"}], "platforms": ["bookworm"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "ruby3.1-dbgsym", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.2-4", "versionType": "deb"}], "platforms": ["bookworm"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "ruby3.1-dev", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.2-4", "versionType": "deb"}], "platforms": ["bookworm"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "ruby3.1-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.2-4", "versionType": "deb"}], "platforms": ["bookworm"], "defaultStatus": "unaffected"}], "references": [{"url": "https://security-tracker.debian.org/tracker/CVE-2021-33621"}], "descriptions": [{"lang": "en", "value": "The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object."}], "providerMetadata": {"orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian", "dateUpdated": "2023-06-09T00:00:00.000Z", "x_subShortName": "debian"}}, {"credits": [{"lang": "en", "value": "packager@almalinux.org"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "almalinux", "product": "ruby", "versions": [{"status": "affected", "version": "0:2.5", "lessThan": "0:2.5.9-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0:2.7", "lessThan": "0:2.7.8-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0:3.0", "lessThan": "0:3.0.7-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0:3.1", "lessThan": "0:3.1.4-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-bundled-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-default-gems", "versions": [{"status": "affected", "version": "0:2.7.8", "lessThan": "0:2.7.8-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0:3.0.7", "lessThan": "0:3.0.7-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0:3.1.4", "lessThan": "0:3.1.4-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-libs", "versions": [{"status": "affected", "version": "0:2.5.9", "lessThan": "0:2.5.9-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0:2.7.8", "lessThan": "0:2.7.8-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0:3.0.7", "lessThan": "0:3.0.7-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0:3.1.4", "lessThan": "0:3.1.4-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-abrt", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-4.module_el8.5.0+2625+ec418553", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module_el8.5.0+2595+0c654ebc", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-abrt-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-4.module_el8.5.0+2625+ec418553", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module_el8.5.0+2595+0c654ebc", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-bigdecimal", "versions": [{"status": "affected", "version": "0:1.3.4", "lessThan": "0:1.3.4-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0:2.0.0", "lessThan": "0:2.0.0-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0:3.0.0", "lessThan": "0:3.0.0-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0:3.1.1", "lessThan": "0:3.1.1-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-bson", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.3.0-2.module_el8.5.0+2625+ec418553", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.8.1-1.module_el8.3.0+6147+d0dfc1e4", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-bson-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.3.0-2.module_el8.5.0+2625+ec418553", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.8.1-1.module_el8.3.0+6147+d0dfc1e4", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-bundler", "versions": [{"status": "affected", "version": "0:1.16.1", "lessThan": "0:1.16.1-4.module_el8.5.0+2625+ec418553", "versionType": "rpm"}, {"status": "affected", "version": "0:2.2.24", "lessThan": "0:2.2.24-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0:2.2.33", "lessThan": "0:2.2.33-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0:2.3.26", "lessThan": "0:2.3.26-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-bundler-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.16.1-4.module_el8.5.0+2625+ec418553", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-did_you_mean", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.0-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-io-console", "versions": [{"status": "affected", "version": "0:0.4.6", "lessThan": "0:0.4.6-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0:0.5.11", "lessThan": "0:0.5.11-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}, {"status": "affected", "version": "0:0.5.6", "lessThan": "0:0.5.6-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0:0.5.7", "lessThan": "0:0.5.7-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.6-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.5-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.4.1-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-json", "versions": [{"status": "affected", "version": "0:2.1.0", "lessThan": "0:2.1.0-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0:2.3.0", "lessThan": "0:2.3.0-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0:2.5.1", "lessThan": "0:2.5.1-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0:2.6.1", "lessThan": "0:2.6.1-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-minitest", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.10.3-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.13.0-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.14.2-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.15.0-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-mongo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.11.3-1.module_el8.3.0+6147+d0dfc1e4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-2.module_el8.5.0+2625+ec418553", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-mongo-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.11.3-1.module_el8.3.0+6147+d0dfc1e4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-2.module_el8.5.0+2625+ec418553", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-mysql2", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.10-4.module_el8.5.0+2625+ec418553", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-1.module_el8.5.0+2595+0c654ebc", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-2.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-3.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-mysql2-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.10-4.module_el8.5.0+2625+ec418553", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-1.module_el8.5.0+2595+0c654ebc", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-2.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-3.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-net-telnet", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.1.1-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.0-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-openssl", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.1.2-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.1.4-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-pg", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.0.0-3.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module_el8.5.0+2595+0c654ebc", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.2-1.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-pg-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.0.0-3.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module_el8.5.0+2595+0c654ebc", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.2-1.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-power_assert", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.1.1-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.1.7-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.1-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.0.1-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-psych", "versions": [{"status": "affected", "version": "0:3.0.2", "lessThan": "0:3.0.2-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0:3.1.0", "lessThan": "0:3.1.0-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0:3.3.2", "lessThan": "0:3.3.2-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0:4.0.4", "lessThan": "0:4.0.4-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-rake", "versions": [{"status": "affected", "version": "0", "lessThan": "0:12.3.3-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.1-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.3-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.6-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-rbs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.4.0-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.0-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-rdoc", "versions": [{"status": "affected", "version": "0:6.0.1.1", "lessThan": "0:6.0.1.1-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0:6.2.1.1", "lessThan": "0:6.2.1.1-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0:6.3.4.1", "lessThan": "0:6.3.4.1-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0:6.4.0", "lessThan": "0:6.4.0-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-rexml", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.5-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.5-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-rss", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.2.9-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.9-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-test-unit", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.7-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.4-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.7-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.5.3-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-typeprof", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.15.2-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.21.3-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-xmlrpc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.3.0-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygems", "versions": [{"status": "affected", "version": "0:2.7.6.3", "lessThan": "0:2.7.6.3-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0:3.1.6", "lessThan": "0:3.1.6-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0:3.2.33", "lessThan": "0:3.2.33-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0:3.3.26", "lessThan": "0:3.3.26-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygems-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.6.3-111.module_el8.9.0+3635+c6f99506", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.6-139.module_el8.8.0+3578+2b4b06da", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.33-143.module_el8.10.0+3852+ce828b19", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-142.module_el8.9.0+3746+91b8233a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2021-33621", "name": "CVE-2021-33621"}], "descriptions": [{"lang": "en", "value": "Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nThe following packages have been upgraded to a later upstream version: ruby (2.7). (BZ#2189465)\n\nSecurity Fix(es):\n\n* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)\n* ruby: ReDoS vulnerability in URI (CVE-2023-28755)\n* ruby: ReDoS vulnerability in Time (CVE-2023-28756)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section."}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000001", "shortName": "almalinux", "dateUpdated": "2024-05-30T00:00:00Z", "x_subShortName": "alma_8"}}, {"credits": [{"lang": "en", "value": "packager@almalinux.org"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "almalinux", "product": "ruby", "versions": [{"status": "affected", "version": "0:3.0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0:3.1", "lessThan": "0:3.1.4-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-bundled-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-default-gems", "versions": [{"status": "affected", "version": "0:3.0.7", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0:3.1.4", "lessThan": "0:3.1.4-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "ruby-libs", "versions": [{"status": "affected", "version": "0:3.0.7", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0:3.1.4", "lessThan": "0:3.1.4-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-bigdecimal", "versions": [{"status": "affected", "version": "0:3.0.0", "lessThan": "0:3.0.0-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0:3.1.1", "lessThan": "0:3.1.1-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-bundler", "versions": [{"status": "affected", "version": "0:2.2.33", "lessThan": "0:2.2.33-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0:2.3.26", "lessThan": "0:2.3.26-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-io-console", "versions": [{"status": "affected", "version": "0:0.5.11", "lessThan": "0:0.5.11-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}, {"status": "affected", "version": "0:0.5.7", "lessThan": "0:0.5.7-162.el9_4", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.4.1-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-json", "versions": [{"status": "affected", "version": "0:2.5.1", "lessThan": "0:2.5.1-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0:2.6.1", "lessThan": "0:2.6.1-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-minitest", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.14.2-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.15.0-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-mysql2", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.4-1.module_el9.1.0+8+503f6fbd", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-mysql2-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.4-1.module_el9.1.0+8+503f6fbd", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-pg", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-1.module_el9.1.0+8+503f6fbd", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-pg-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-1.module_el9.1.0+8+503f6fbd", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-power_assert", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.1-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.0.1-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-psych", "versions": [{"status": "affected", "version": "0:3.3.2", "lessThan": "0:3.3.2-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0:4.0.4", "lessThan": "0:4.0.4-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-rake", "versions": [{"status": "affected", "version": "0", "lessThan": "0:13.0.3-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.6-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-rbs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.4.0-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.0-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-rdoc", "versions": [{"status": "affected", "version": "0:6.3.4.1", "lessThan": "0:6.3.4.1-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0:6.4.0", "lessThan": "0:6.4.0-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-rexml", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.5-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.5-162.el9_4", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-rss", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.2.9-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.9-162.el9_4", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-test-unit", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.3.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.5.3-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygem-typeprof", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.15.2-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.21.3-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygems", "versions": [{"status": "affected", "version": "0:3.2.33", "lessThan": "0:3.2.33-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0:3.3.26", "lessThan": "0:3.3.26-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}, {"vendor": "almalinux", "product": "rubygems-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.33-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-143.module_el9.3.0+60+5ebc989a", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2021-33621", "name": "CVE-2021-33621"}], "descriptions": [{"lang": "en", "value": "Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nThe following packages have been upgraded to a later upstream version: ruby (3.1). (AlmaLinux-29052)\n\nSecurity Fix(es):\n\n* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)\n* ruby: ReDoS vulnerability in URI (CVE-2023-28755)\n* ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)\n* ruby: ReDoS vulnerability in Time (CVE-2023-28756)\n\nBug Fix(es):\n\n* ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (AlmaLinux-29048)\n* ruby: Ruby cannot read private key in FIPS mode on AlmaLinux 9 (AlmaLinux-12437)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section."}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000001", "shortName": "almalinux", "dateUpdated": "2024-06-11T00:00:00Z", "x_subShortName": "alma_9"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"medium\"}"}}}], "affected": [{"vendor": "fedora", "product": "ruby", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.5-155.fc35", "versionType": "rpm"}], "platforms": ["cpe:/o:fedoraproject:fedora:35"], "defaultStatus": "unaffected"}, {"vendor": "fedora", "product": "ruby", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.3-172.fc36", "versionType": "rpm"}], "platforms": ["cpe:/o:fedoraproject:fedora:36"], "defaultStatus": "unaffected"}, {"vendor": "fedora", "product": "ruby", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.3-172.fc37", "versionType": "rpm"}], "platforms": ["cpe:/o:fedoraproject:fedora:37"], "defaultStatus": "unaffected"}], "references": [{"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2022-b9b710f199"}, {"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2022-ef96a58bbe"}, {"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2022-f0f6c6bec2"}], "descriptions": [{"lang": "en", "value": "ruby/cgi-gem: HTTP response splitting in CGI"}, {"lang": "en", "value": "ruby: ruby/cgi-gem: HTTP response splitting in CGI"}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2022-12-08T01:55:36Z", "x_subShortName": "fedora"}}, {"metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"MODERATE\"}"}}}], "affected": [{"vendor": "oraclelinux", "product": "ruby", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-bundled-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-default-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-abrt", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-4.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.3.0+7760+537395ec", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-abrt-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-4.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.3.0+7760+537395ec", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-bigdecimal", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.4-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.0.0-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.0-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.1-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-bson", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.3.0-2.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.8.1-1.module+el8.4.0+20239+cbf59dc8", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-bson-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.3.0-2.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.8.1-1.module+el8.4.0+20239+cbf59dc8", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-bundler", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.16.1-4.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.2.24-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.2.33-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.3.26-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-bundler-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.16.1-4.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-did_you_mean", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.0-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-io-console", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.6-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.11-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.6-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.7-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.6-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.5-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.4.1-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-json", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.1.0-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.3.0-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.6.1-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-minitest", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.10.3-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.13.0-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.14.2-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.15.0-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-mongo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.11.3-1.module+el8.3.0+7760+537395ec", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-2.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-mongo-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.11.3-1.module+el8.3.0+7760+537395ec", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-2.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-mysql2", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.10-4.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-1.module+el8.4.0+20239+cbf59dc8", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-2.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-3.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-mysql2-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.10-4.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-1.module+el8.4.0+20239+cbf59dc8", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-2.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-3.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-net-telnet", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.1.1-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.0-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-openssl", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.1.2-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.1.4-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-pg", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.0.0-3.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.4.0+20239+cbf59dc8", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.2-1.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-pg-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.0.0-3.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.4.0+20239+cbf59dc8", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.2-1.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-power_assert", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.1.1-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.1.7-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.1-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.0.1-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-psych", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.2-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.0-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.2-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.0.4-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-rake", "versions": [{"status": "affected", "version": "0", "lessThan": "0:12.3.3-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.1-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.3-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.6-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-rbs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.4.0-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.0-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-rdoc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:6.0.1.1-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.2.1.1-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.3.4.1-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.4.0-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-rexml", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.5-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.5-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-rss", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.2.9-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.9-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-test-unit", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.7-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.4-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.7-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.5.3-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-typeprof", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.15.2-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.21.3-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-xmlrpc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.3.0-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.6.3-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.6-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.33-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygems-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.6.3-111.module+el8.9.0+90042+a65659a6", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.6-139.module+el8.8.0+21111+2e34bf27", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.33-143.module+el8.10.0+90343+d5e92a1d", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-142.module+el8.9.0+90182+7bdfc9e5", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-bundled-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-default-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "ruby-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-bigdecimal", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.0-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.1-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-bundler", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.2.33-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.3.26-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-io-console", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.11-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.7-162.el9_4", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.4.1-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-json", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.1-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.6.1-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-minitest", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.14.2-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.15.0-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-mysql2", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.4-1.module+el9.1.0+20815+286161bd", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-mysql2-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.4-1.module+el9.1.0+20815+286161bd", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-pg", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-1.module+el9.1.0+20815+286161bd", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-pg-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-1.module+el9.1.0+20815+286161bd", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-power_assert", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.1-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.0.1-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-psych", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.3.2-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.0.4-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-rake", "versions": [{"status": "affected", "version": "0", "lessThan": "0:13.0.3-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.6-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-rbs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.4.0-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.0-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-rdoc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:6.3.4.1-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.4.0-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-rexml", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.5-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.5-162.el9_4", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-rss", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.2.9-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.9-162.el9_4", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-test-unit", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.3.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.5.3-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygem-typeprof", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.15.2-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.21.3-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.33-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "rubygems-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.33-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-143.module+el9.3.0+90207+bf8fadcb", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}], "references": [{"url": "https://linux.oracle.com/cve/CVE-2021-33621.html"}], "descriptions": [{"lang": "en", "value": "The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object."}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000006", "shortName": "oraclelinux", "dateUpdated": "2023-07-08T00:00:00Z", "x_subShortName": "oraclelinux"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "redhat", "product": "ruby", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-bundled-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-default-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-abrt", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-4.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.3.0+7192+4e3a532a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-abrt-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-4.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.3.0+7192+4e3a532a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-bigdecimal", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.4-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.0.0-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.0-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.1-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-bson", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.3.0-2.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.8.1-1.module+el8.3.0+7192+4e3a532a", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-bson-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.3.0-2.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.8.1-1.module+el8.3.0+7192+4e3a532a", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-bundler", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.16.1-4.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.2.24-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.2.33-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.3.26-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-bundler-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.16.1-4.module+el8.9.0+19193+435404ae", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-did_you_mean", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.0-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-io-console", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.6-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.11-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.6-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.7-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.6-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.5-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.4.1-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-json", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.1.0-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.3.0-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.6.1-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-minitest", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.10.3-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.13.0-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.14.2-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.15.0-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-mongo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.11.3-1.module+el8.3.0+7192+4e3a532a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-2.module+el8.9.0+19193+435404ae", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-mongo-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.11.3-1.module+el8.3.0+7192+4e3a532a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-2.module+el8.9.0+19193+435404ae", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-mysql2", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.10-4.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-1.module+el8.3.0+7192+4e3a532a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-2.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-3.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-mysql2-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.10-4.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-1.module+el8.3.0+7192+4e3a532a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-2.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-3.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-net-telnet", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.1.1-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.0-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-openssl", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.1.2-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.1.4-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-pg", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.0.0-3.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.3.0+7192+4e3a532a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.2-1.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-pg-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.0.0-3.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.3.0+7192+4e3a532a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.2-1.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-power_assert", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.1.1-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.1.7-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.1-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.0.1-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-psych", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.2-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.0-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.2-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.0.4-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-rake", "versions": [{"status": "affected", "version": "0", "lessThan": "0:12.3.3-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.1-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.3-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.6-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-rbs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.4.0-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.0-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-rdoc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:6.0.1.1-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.2.1.1-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.3.4.1-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.4.0-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-rexml", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.5-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.5-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-rss", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.2.9-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.9-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-test-unit", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.7-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.4-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.7-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.5.3-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-typeprof", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.15.2-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.21.3-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-xmlrpc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.3.0-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.6.3-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.6-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.33-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygems-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.6.3-111.module+el8.9.0+19193+435404ae", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.6-139.module+el8.8.0+18745+f1bef313", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.33-143.module+el8.10.0+21858+d19f3934", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-142.module+el8.9.0+21471+7d1e4a35", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2023:3821"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7025"}, {"url": "https://access.redhat.com/errata/RHSA-2024:1431"}, {"url": "https://access.redhat.com/errata/RHSA-2024:3500"}, {"url": "https://access.redhat.com/security/cve/CVE-2021-33621"}], "descriptions": [{"lang": "en", "value": "Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)\n\n* ruby: Buffer overrun in String-to-Float conversion (CVE-2022-28739)\n\n* ruby: ReDoS vulnerability in URI (CVE-2023-28755)\n\n* ruby: ReDoS vulnerability in Time (CVE-2023-28756)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from the References section."}, {"lang": "en", "value": "Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nSecurity Fix(es):\n\n* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)\n\n* ruby: ReDoS vulnerability in URI (CVE-2023-28755)\n\n* ruby: ReDoS vulnerability in Time (CVE-2023-28756)\n\n* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)\n\n* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)\n\n* ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section."}, {"lang": "en", "value": "Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nThe following packages have been upgraded to a later upstream version: ruby (2.7). (BZ#2189465)\n\nSecurity Fix(es):\n\n* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)\n\n* ruby: ReDoS vulnerability in URI (CVE-2023-28755)\n\n* ruby: ReDoS vulnerability in Time (CVE-2023-28756)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section."}, {"lang": "en", "value": "Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nThe following packages have been upgraded to a later upstream version: ruby (3.1). (RHEL-28565)\n\nSecurity Fix(es):\n\n* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)\n\n* ruby: ReDoS vulnerability in URI (CVE-2023-28755)\n\n* ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)\n\n* ruby: ReDoS vulnerability in Time (CVE-2023-28756)\n\nBug Fix(es):\n\n* ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (RHEL-28569)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2022-11-18T00:00:00Z", "x_subShortName": "redhat_8"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "redhat", "product": "ruby", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-bundled-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-default-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "ruby-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-bigdecimal", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.0-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.1-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-bundler", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.2.33-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.3.26-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-io-console", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.11-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.7-162.el9_4", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.4.1-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-json", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.1-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.6.1-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-minitest", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.14.2-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.15.0-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-mysql2", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.4-1.module+el9.1.0+15737+76195479", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-mysql2-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.4-1.module+el9.1.0+15737+76195479", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-pg", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-1.module+el9.1.0+15737+76195479", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-pg-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-1.module+el9.1.0+15737+76195479", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-power_assert", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.1-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.0.1-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-psych", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.3.2-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.0.4-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-rake", "versions": [{"status": "affected", "version": "0", "lessThan": "0:13.0.3-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.6-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-rbs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.4.0-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.0-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-rdoc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:6.3.4.1-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.4.0-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-rexml", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.5-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.5-162.el9_4", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-rss", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.2.9-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.9-162.el9_4", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-test-unit", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.3.7-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.5.3-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygem-typeprof", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.15.2-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.21.3-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.33-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "rubygems-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.33-162.el9_4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-143.module+el9.3.0+21558+96b51efd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2024:1576"}, {"url": "https://access.redhat.com/errata/RHSA-2024:3838"}, {"url": "https://access.redhat.com/security/cve/CVE-2021-33621"}], "descriptions": [{"lang": "en", "value": "Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nThe following packages have been upgraded to a later upstream version: ruby\n(3.0). (RHEL-35740)\n\nSecurity Fix(es):\n\n* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)\n\n* ruby: ReDoS vulnerability in URI (CVE-2023-28755)\n\n* ruby: ReDoS vulnerability in Time (CVE-2023-28756)\n\n* ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)\n\n* ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)\n\n* ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section."}, {"lang": "en", "value": "Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks.\n\nThe following packages have been upgraded to a later upstream version: ruby (3.1). (RHEL-29052)\n\nSecurity Fix(es):\n\n* ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)\n\n* ruby: ReDoS vulnerability in URI (CVE-2023-28755)\n\n* ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)\n\n* ruby: ReDoS vulnerability in Time (CVE-2023-28756)\n\nBug Fix(es):\n\n* ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (RHEL-29048)\n\n* ruby: Ruby cannot read private key in FIPS mode on RHEL 9 (RHEL-12437)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2022-11-18T00:00:00Z", "x_subShortName": "redhat_9"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Moderate\"}"}}}], "affected": [{"vendor": "rocky", "product": "ruby", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-bundled-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-bundled-gems-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-default-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-libs-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "ruby-libs-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.8-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-abrt", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-4.module+el8.5.0+738+032c9c02", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.3.0-4.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+1679+61871737", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+1826+b62220b4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+1827+16ecb9d2", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.5.0+668+665814fa", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.9.0+1537+0b2034bd", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-abrt-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-4.module+el8.5.0+738+032c9c02", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.3.0-4.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+1679+61871737", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+1826+b62220b4", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.10.0+1827+16ecb9d2", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.5.0+668+665814fa", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.4.0-1.module+el8.9.0+1537+0b2034bd", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-bigdecimal", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.4-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.0.0-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.0-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.1-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-bigdecimal-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.4-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-bigdecimal-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.0.0-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.0.0-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.1-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-bson", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.3.0-2.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.8.1-1.module+el8.4.0+594+11b6673a", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-bson-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.3.0-2.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.8.1-1.module+el8.4.0+594+11b6673a", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-bson-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.3.0-2.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.8.1-1.module+el8.4.0+594+11b6673a", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-bson-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:4.3.0-2.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.8.1-1.module+el8.4.0+594+11b6673a", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-bundler", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.16.1-4.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.2.24-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.2.33-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.3.26-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-bundler-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.16.1-4.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-did_you_mean", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.0-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-io-console", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.6-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.11-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.6-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-io-console-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.6-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-io-console-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.11-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.6-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.2.6-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.5-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.4.1-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-json", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.1.0-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.3.0-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.6.1-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-json-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.1.0-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-json-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.3.0-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.6.1-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-minitest", "versions": [{"status": "affected", "version": "0", "lessThan": "0:5.10.3-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.13.0-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.14.2-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:5.15.0-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-mongo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.11.3-1.module+el8.4.0+594+11b6673a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-2.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-mongo-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.11.3-1.module+el8.4.0+594+11b6673a", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.5.1-2.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-mysql2", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.10-4.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-1.module+el8.5.0+668+665814fa", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-2.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-3.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-mysql2-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.10-4.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-1.module+el8.5.0+668+665814fa", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-2.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-3.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-mysql2-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.10-4.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-1.module+el8.5.0+668+665814fa", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-2.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-3.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-mysql2-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.4.10-4.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-1.module+el8.5.0+668+665814fa", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-2.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.5.3-3.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-net-telnet", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.1.1-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.0-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-openssl", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.1.2-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.1.4-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-openssl-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.1.2-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-openssl-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.1.4-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-pg", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.0.0-3.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.5.0+668+665814fa", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.9.0+1537+0b2034bd", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.2-1.module+el8.7.0+1081+f0a69743", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-pg-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.0.0-3.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.5.0+668+665814fa", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.9.0+1537+0b2034bd", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.2-1.module+el8.7.0+1081+f0a69743", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-pg-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.0.0-3.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.5.0+668+665814fa", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.9.0+1537+0b2034bd", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.2-1.module+el8.7.0+1081+f0a69743", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-pg-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.0.0-3.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.5.0+668+665814fa", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.3-1.module+el8.9.0+1537+0b2034bd", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.3.2-1.module+el8.7.0+1081+f0a69743", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-power_assert", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.1.1-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.1.7-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.2.1-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.0.1-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-psych", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.2-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.0-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.2-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.0.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-psych-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.0.2-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-psych-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.1.0-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.2-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:4.0.4-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-rake", "versions": [{"status": "affected", "version": "0", "lessThan": "0:12.3.3-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.1-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.3-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:13.0.6-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-rbs", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.4.0-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:2.7.0-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-rbs-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.0-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-rdoc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:6.0.1.1-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.2.1.1-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.3.4.1-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:6.4.0-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-rexml", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.5-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.5-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.5-143.module+el8.10.0+1826+b62220b4", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-rss", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.2.9-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.9-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.2.9-143.module+el8.10.0+1826+b62220b4", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-test-unit", "versions": [{"status": "affected", "version": "0", "lessThan": "0:3.2.7-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.4-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.7-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.5.3-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-typeprof", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.15.2-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.21.3-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-xmlrpc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.3.0-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:0.3.0-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygems", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.6.3-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.6-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.33-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygems-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.7.6.3-111.module+el8.9.0+1536+5f79634e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.1.6-139.module+el8.8.0+1320+d2449f6f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.2.33-143.module+el8.10.0+1820+f3fffb92", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:3.3.26-142.module+el8.9.0+1759+ff68ae72", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-mysql2", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.4-1.module+el9.6.0+31865+0893c253", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-mysql2-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.4-1.module+el9.6.0+31865+0893c253", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-mysql2-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.4-1.module+el9.6.0+31865+0893c253", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-mysql2-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:0.5.4-1.module+el9.6.0+31865+0893c253", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-pg", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-1.module+el9.6.0+31865+0893c253", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-pg-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-1.module+el9.6.0+31865+0893c253", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-pg-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-1.module+el9.6.0+31865+0893c253", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "rubygem-pg-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.3.5-1.module+el9.6.0+31865+0893c253", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}], "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2075687"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2149706"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2184059"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2184061"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2189465"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2218614"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270749"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270750"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2276810"}], "descriptions": [{"lang": "en", "value": "ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)"}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000004", "shortName": "rocky", "dateUpdated": "2023-08-31T16:54:34Z", "x_subShortName": "rocky"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "suse", "product": "libruby2_5-2_5", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150000.4.29.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-basesystem:15:sp6", "cpe:/o:suse:sle_hpc:15:sp1", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sled:15:sp6", "cpe:/o:suse:sles-ltss:15:sp1", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles-ltss:15:sp3", "cpe:/o:suse:sles:15:sp1", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles_sap:15:sp1", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:sles_teradata:15:sp4", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150000.4.29.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-basesystem:15:sp6", "cpe:/o:suse:sle_hpc:15:sp1", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sled:15:sp6", "cpe:/o:suse:sles-ltss:15:sp1", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles-ltss:15:sp3", "cpe:/o:suse:sles:15:sp1", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles_sap:15:sp1", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:sles_teradata:15:sp4", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150000.4.29.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-basesystem:15:sp6", "cpe:/o:suse:sle_hpc:15:sp1", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sled:15:sp6", "cpe:/o:suse:sles-ltss:15:sp1", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles-ltss:15:sp3", "cpe:/o:suse:sles:15:sp1", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles_sap:15:sp1", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:sles_teradata:15:sp4", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-devel-extra", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150000.4.29.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-basesystem:15:sp6", "cpe:/o:suse:sle_hpc:15:sp1", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sled:15:sp6", "cpe:/o:suse:sles-ltss:15:sp1", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles-ltss:15:sp3", "cpe:/o:suse:sles:15:sp1", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles_sap:15:sp1", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:sles_teradata:15:sp4", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-stdlib", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150000.4.29.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-basesystem:15:sp6", "cpe:/o:suse:sle_hpc:15:sp1", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp3", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sled:15:sp6", "cpe:/o:suse:sles-ltss:15:sp1", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles-ltss:15:sp3", "cpe:/o:suse:sles:15:sp1", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp3", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles_sap:15:sp1", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp3", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:sles_teradata:15:sp4", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp1", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sle_rt:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles-ltss:15", "cpe:/o:suse:sles-ltss:15:sp1", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp1", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp1", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby-devel", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle_hpc:15", "cpe:/o:suse:sle_hpc:15:sp1", "cpe:/o:suse:sle_hpc:15:sp2", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sle_rt:15:sp3", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles-ltss:15", "cpe:/o:suse:sles-ltss:15:sp1", "cpe:/o:suse:sles-ltss:15:sp2", "cpe:/o:suse:sles:15", "cpe:/o:suse:sles:15:sp1", "cpe:/o:suse:sles:15:sp2", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15", "cpe:/o:suse:sles_sap:15:sp1", "cpe:/o:suse:sles_sap:15:sp2", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "libruby2_5-2_5", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150700.22.16", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150700.22.16", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150700.22.16", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-devel-extra", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150700.22.16", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-stdlib", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150700.22.16", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1205726"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33621", "name": "Mitre CVE-2021-33621"}, {"url": "https://www.suse.com/security/cve/CVE-2021-33621", "name": "SUSE CVE-2021-33621"}, {"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016881.html", "name": "SUSE-CU-2023:3575-1"}, {"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-November/016975.html", "name": "SUSE-CU-2023:3673-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2023-October/032354.html", "name": "SUSE-SU-2023:4176-1"}], "descriptions": [{"lang": "en", "value": "\n    The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2023-09-23T00:00:00Z", "x_subShortName": "suse_server_15"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "suse", "product": "libruby2_5-2_5", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150000.4.29.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-basesystem:15:sp6", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sled:15:sp6", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150000.4.29.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-basesystem:15:sp6", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sled:15:sp6", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150000.4.29.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-basesystem:15:sp6", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sled:15:sp6", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-devel-extra", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150000.4.29.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-basesystem:15:sp6", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sled:15:sp6", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-stdlib", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150000.4.29.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle-module-basesystem:15:sp6", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sled:15:sp6", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby-devel", "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle-module-basesystem:15:sp4", "cpe:/o:suse:sle-module-basesystem:15:sp5", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sled:15:sp4", "cpe:/o:suse:sled:15:sp5", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:suse-manager-proxy:4.3", "cpe:/o:suse:suse-manager-retail-branch-server:4.3"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "libruby2_5-2_5", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150700.22.16", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150700.22.16", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150700.22.16", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-devel-extra", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150700.22.16", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "ruby2.5-stdlib", "versions": [{"status": "affected", "version": "0", "lessThan": "0:2.5.9-150700.22.16", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1205726"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33621", "name": "Mitre CVE-2021-33621"}, {"url": "https://www.suse.com/security/cve/CVE-2021-33621", "name": "SUSE CVE-2021-33621"}, {"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016881.html", "name": "SUSE-CU-2023:3575-1"}, {"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-November/016975.html", "name": "SUSE-CU-2023:3673-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2023-October/032354.html", "name": "SUSE-SU-2023:4176-1"}], "descriptions": [{"lang": "en", "value": "\n    The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2023-09-23T00:00:00Z", "x_subShortName": "suse_desktop_15"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "suse", "product": "ruby", "platforms": ["cpe:/o:suse:sle_hpc:12:sp4", "cpe:/o:suse:sle_hpc:12:sp5", "cpe:/o:suse:sles:12:sp4", "cpe:/o:suse:sles:12:sp5", "cpe:/o:suse:sles_sap:12:sp4", "cpe:/o:suse:sles_sap:12:sp5"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1205726"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33621", "name": "Mitre CVE-2021-33621"}, {"url": "https://www.suse.com/security/cve/CVE-2021-33621", "name": "SUSE CVE-2021-33621"}, {"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016881.html", "name": "SUSE-CU-2023:3575-1"}, {"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-November/016975.html", "name": "SUSE-CU-2023:3673-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2023-October/032354.html", "name": "SUSE-SU-2023:4176-1"}], "descriptions": [{"lang": "en", "value": "\n    The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2023-09-23T00:00:00Z", "x_subShortName": "suse_server_12"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "amazon", "product": "ruby", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.0.648-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.0.648-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.0.648-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.0.648-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.0.648-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.0.648-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby-tcltk", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.0.648-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "rubygem-bigdecimal", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2.0-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "rubygem-io-console", "versions": [{"status": "affected", "version": "0", "lessThan": "0.4.2-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "rubygem-json", "versions": [{"status": "affected", "version": "0", "lessThan": "1.7.7-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "rubygem-minitest", "versions": [{"status": "affected", "version": "0", "lessThan": "4.3.2-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "rubygem-psych", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.0-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "rubygem-rake", "versions": [{"status": "affected", "version": "0", "lessThan": "0.9.6-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "rubygem-rdoc", "versions": [{"status": "affected", "version": "0", "lessThan": "4.0.0-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "rubygems", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.14.1-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "rubygems-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.14.1-36.amzn2.0.8", "versionType": "rpm"}], "defaultStatus": "unaffected"}], "references": [{"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33621"}], "descriptions": [{"lang": "en", "value": "The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object."}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000000", "shortName": "alas", "dateUpdated": "2024-03-13T20:26:00Z", "x_subShortName": "alas_2"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "amazon", "product": "ruby3.1", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-bundled-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-bundled-gems-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-default-gems", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-doc", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-libs", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-libs-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-bigdecimal", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.1-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-bigdecimal-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.1-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-bundler", "versions": [{"status": "affected", "version": "0", "lessThan": "2.3.26-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-io-console", "versions": [{"status": "affected", "version": "0", "lessThan": "0.5.11-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-io-console-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0.5.11-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-irb", "versions": [{"status": "affected", "version": "0", "lessThan": "1.4.1-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-json", "versions": [{"status": "affected", "version": "0", "lessThan": "2.6.1-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-json-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "2.6.1-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-minitest", "versions": [{"status": "affected", "version": "0", "lessThan": "5.15.0-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-power_assert", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.1-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-psych", "versions": [{"status": "affected", "version": "0", "lessThan": "4.0.4-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-psych-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "4.0.4-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-rake", "versions": [{"status": "affected", "version": "0", "lessThan": "13.0.6-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-rbs", "versions": [{"status": "affected", "version": "0", "lessThan": "2.7.0-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-rbs-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "2.7.0-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-rdoc", "versions": [{"status": "affected", "version": "0", "lessThan": "6.4.0-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-rexml", "versions": [{"status": "affected", "version": "0", "lessThan": "3.2.5-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-rss", "versions": [{"status": "affected", "version": "0", "lessThan": "0.2.9-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-test-unit", "versions": [{"status": "affected", "version": "0", "lessThan": "3.5.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygem-typeprof", "versions": [{"status": "affected", "version": "0", "lessThan": "0.21.3-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygems", "versions": [{"status": "affected", "version": "0", "lessThan": "3.3.26-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "ruby3.1-rubygems-devel", "versions": [{"status": "affected", "version": "0", "lessThan": "3.3.26-173.amzn2022.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}], "references": [{"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33621"}], "descriptions": [{"lang": "en", "value": "The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object."}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000000", "shortName": "alas", "dateUpdated": "2023-01-20T16:43:00Z", "x_subShortName": "alas_2022"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"cpes": ["cpe:2.3:a:ruby-lang:cgi:*:*:*:*:*:ruby:*:*"], "vendor": "ruby-lang", "product": "cgi", "versions": [{"status": "affected", "version": "0", "lessThan": "0.1.0.2", "versionType": "custom"}, {"status": "affected", "version": "0.2.0", "lessThan": "0.2.2", "versionType": "custom"}, {"status": "affected", "version": "0.3.0", "lessThan": "0.3.5", "versionType": "custom"}], "platforms": ["ruby"], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*"], "vendor": "ruby-lang", "product": "ruby", "versions": [{"status": "affected", "version": "2.7.0", "lessThan": "2.7.7", "versionType": "custom"}, {"status": "affected", "version": "3.0.0", "lessThan": "3.0.5", "versionType": "custom"}, {"status": "affected", "version": "3.1.0", "lessThan": "3.1.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*"], "vendor": "fedoraproject", "product": "fedora", "versions": [{"status": "affected", "version": "35"}, {"status": "affected", "version": "36"}, {"status": "affected", "version": "37"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.ruby-lang.org/en/news/2022/11/22/http-response-splitting-in-cgi-cve-2021-33621/", "tags": ["exploit", "third-party-advisory"]}, {"url": "https://security.netapp.com/advisory/ntap-20221228-0004/", "tags": ["third-party-advisory"]}, {"url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00012.html"}, {"url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQR7LWED6VAPD5ATYOBZIGJQPCUBRJBX/"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THVTYHHEOVLQFCFHWURZYO7PVUPBHRZD/"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YACE6ORF2QBXXBK2V2CM36D7TZMEJVAS/"}, {"url": "https://security.gentoo.org/glsa/202401-27"}], "descriptions": [{"lang": "en", "value": "The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object."}, {"lang": "es", "value": "La gema cgi anterior a 0.1.0.2, 0.2.x anterior a 0.2.2 y 0.3.x anterior a 0.3.5 para Ruby permite la división de respuestas HTTP. Esto es relevante para aplicaciones que utilizan entradas de usuarios que no son de confianza, ya sea para generar una respuesta HTTP o para crear un objeto CGI::Cookie."}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-74", "description": "CWE-74"}]}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000003", "shortName": "nvd", "dateUpdated": "2022-11-18T23:15:18Z", "x_subShortName": "nvd"}}}, "cveMetadata": {"cveId": "CVE-2021-33621", "state": "PUBLISHED", "dateUpdated": "2025-11-04T16:15:42Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2022-11-18T23:15:18Z", "assignerShortName": "mitre"}, "dataVersion": "5.0"}